Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa
File:                     09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa (raw, json)
Hash identifier:          R+drhKOuftW0svjUZJ0+9Q9C66SiiwQ9CVopKa1Tty8=
Subject key identifier:   05:F5:A0:85:E0:EF:F9:33:E4:2C:DF:61:F9:C7:C8:B6:6D:AA:36:E3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFEEF75A53BA12A3A3AD40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397231
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:ee:f7:5a:53:ba:12:a3:a3:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=906b4081-4e30-4da9-a602-44c98ae41cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:52:a0:48:17:24:10:ed:cb:b7:8e:a6:18:
                    45:2b:14:da:a1:3c:5d:18:d9:3c:26:4e:99:77:87:
                    f1:00:cd:5d:47:0d:a8:d7:65:b9:bb:e9:6e:0a:57:
                    e3:d7:d1:6b:22:b5:d5:7a:a7:12:19:7a:ca:27:43:
                    a0:f1:fc:f8:e2:27:42:7f:61:34:e3:89:20:5c:8d:
                    a6:96:2d:02:8b:97:4b:34:0b:49:b6:40:0f:0e:ab:
                    bf:2a:3a:b3:84:b6:c5:5b:a6:a8:45:ed:d6:bc:50:
                    94:6a:e7:fa:01:5b:ac:5d:f3:21:73:ea:18:f6:42:
                    33:11:89:ae:32:4b:f6:6c:b9:e1:a6:85:55:ee:a2:
                    c3:d4:77:83:c7:0a:b0:0f:5d:51:f1:61:21:c2:f7:
                    47:fe:b1:86:78:89:e4:62:33:3a:f3:d1:e0:5d:8a:
                    1b:a0:a4:ab:b8:fa:8b:72:7b:1b:1d:94:ed:ec:7b:
                    08:66:69:89:f3:31:d5:29:a1:5c:43:d0:01:98:99:
                    07:59:ee:7b:80:d4:38:ee:99:f6:ca:bf:5c:73:09:
                    54:e0:f5:d4:2e:b4:d0:5b:0f:84:90:f4:24:aa:33:
                    c6:c5:61:a0:58:4f:92:91:87:25:f7:44:89:d7:bb:
                    cb:f6:08:5a:98:06:74:28:70:f6:98:6a:41:fd:65:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:A0:85:E0:EF:F9:33:E4:2C:DF:61:F9:C7:C8:B6:6D:AA:36:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:75:69:62:76:c4:b8:62:0b:5b:71:17:17:3b:ca:58:f1:30:
         39:5f:42:fb:f1:cb:37:80:ab:90:fc:da:49:88:0c:0e:60:db:
         d5:4e:0a:50:0a:d4:eb:1f:59:dd:90:2c:87:9d:fa:31:ce:d5:
         02:5a:cd:70:79:4e:d1:e1:7b:db:1f:0a:07:bc:f7:bd:31:4d:
         07:e8:cb:c9:76:b3:73:03:c9:50:65:ac:0c:bd:68:b3:ab:f1:
         d8:12:cd:80:f7:31:58:41:06:67:29:02:c2:35:3c:41:77:c6:
         ab:45:94:3b:79:a6:c0:ac:f8:34:3c:91:ea:ba:ee:22:d9:db:
         cd:a3:af:44:6e:44:f4:ee:8d:d5:6d:9e:8f:e4:a2:77:f1:69:
         ec:74:01:bd:63:82:13:52:5d:ac:30:68:5d:22:2a:00:3c:55:
         9f:8b:66:16:49:b0:ee:53:23:06:9f:83:77:44:a2:a2:d5:4f:
         21:d2:8a:2a:71:37:1f:c6:e5:ca:a6:5f:0a:73:42:a3:c8:a7:
         91:d9:33:75:74:0d:e9:2e:84:e3:62:72:16:ee:91:21:ba:70:
         46:ae:64:27:f3:04:75:8e:e8:83:5d:b3:08:8e:48:9e:02:70:
         24:4e:64:fa:06:06:2d:26:6d:88:1a:f2:a9:fa:51:5f:8e:08:
         e3:60:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:04:46 2025 by rpki-client